Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SDmlmY09pb4qHDC7jXIEFHHusU8.roa
File: SDmlmY09pb4qHDC7jXIEFHHusU8.roa (raw, json)
Hash identifier: t7Ef9hsaB1q1MgQgpRKiLgTchXLhBGVk3dP483Cdl28=
Subject key identifier: 48:39:A5:99:8D:3D:A5:BE:2A:1C:30:BB:8D:72:04:14:71:EE:B1:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DBFAAE656C81C5755CC4F1B865BB6629
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SDmlmY09pb4qHDC7jXIEFHHusU8.roa
Signing time: Sun 04 Dec 2022 07:12:29 +0000
ROA not before: Sun 04 Dec 2022 07:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:db:fa:ae:65:6c:81:c5:75:5c:c4:f1:b8:65:bb:66:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 07:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4839a5998d3da5be2a1c30bb8d72041471eeb14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:34:d8:71:7b:84:a5:4c:91:0e:6e:58:20:
a2:8e:79:12:f5:9b:1e:73:36:13:3f:3c:5c:d0:d3:
9c:4f:fd:3b:c6:ef:1b:7a:73:71:9b:db:e2:63:3d:
5f:69:43:6b:56:a2:5a:a2:20:bc:34:00:bf:a2:c6:
9b:b7:50:3c:06:e0:f8:6b:3b:9e:df:f6:a3:97:d6:
2f:a2:2e:ed:9e:12:ad:0b:d0:3c:34:53:89:c8:21:
05:62:34:14:8e:ed:7f:8f:8e:41:91:d8:8a:3d:70:
50:b6:f9:0c:81:4e:02:e8:72:ee:18:05:78:09:f4:
c5:65:fd:ef:8b:06:3a:72:10:6d:76:7d:20:72:c3:
6d:b7:ff:50:74:6e:f0:5c:f3:cc:14:3c:e8:e9:b4:
1a:4f:e7:1b:a8:cf:c0:65:fd:2f:7f:38:b4:b0:ea:
0f:a2:97:d5:40:b8:00:ef:fe:54:e1:a8:a9:fa:34:
75:04:0a:fd:be:52:ba:c8:9e:dc:7d:6b:05:05:c8:
fa:e4:f1:3a:b2:0e:94:f2:37:49:0a:f4:16:e2:0d:
e6:cb:ae:e0:4f:0d:b1:b8:13:eb:c8:70:df:2f:1d:
8b:1d:0a:ad:b0:81:9f:37:05:6b:b8:9b:55:d4:a2:
0d:4c:15:f1:d1:e6:a7:5b:c0:bd:95:8e:70:c7:2c:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:39:A5:99:8D:3D:A5:BE:2A:1C:30:BB:8D:72:04:14:71:EE:B1:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SDmlmY09pb4qHDC7jXIEFHHusU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:7c:c7:68:0f:e7:55:4d:81:77:dc:04:6d:53:52:de:5b:81:
ae:6b:ce:90:8d:ed:c8:ec:f5:30:dd:71:d3:07:2e:f9:22:ac:
e5:aa:87:24:d8:d6:98:c0:4a:72:2c:b8:fa:8b:14:d7:95:71:
da:af:c4:00:2e:80:a1:57:2e:9c:93:ab:46:a9:d5:da:d9:31:
df:79:de:f8:f0:d5:7d:de:71:e1:af:c9:1a:f0:91:ec:5a:52:
34:31:d7:e4:ff:9e:2a:d9:a5:1f:7d:06:64:ba:02:35:14:44:
e7:f6:93:0e:2b:a9:e1:34:40:03:91:5f:a4:67:69:d1:5e:7e:
e3:6f:f0:ff:d1:94:eb:f2:3d:7a:f6:74:b8:4f:84:b8:c7:cd:
70:42:b1:44:63:bd:21:b0:b2:11:c2:1f:45:5d:90:3b:95:3b:
2e:9a:b2:a6:f5:6c:27:b9:d1:59:00:76:89:02:d9:b9:f8:58:
0c:fe:38:0b:08:9b:1a:4c:60:5c:08:8e:d7:0c:67:8b:41:53:
ce:1d:41:08:09:07:a8:78:8f:98:92:36:e4:bf:4b:bc:41:0e:
52:ca:28:c3:46:64:91:06:c3:03:83:fe:30:77:78:f7:34:f7:
70:ca:92:1b:48:96:e4:8d:ad:0a:1c:6a:3b:9e:ba:fa:e9:0b:
cb:3c:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:27:55 2025 by rpki-client